Cisco Catalyst 3750-X and 3560-X Series Switches

Transcription

1 Cisco Catalyst 3750-X and 3560-X Series Switches The Cisco Catalyst 3750-X and 3560-X Series Switches are an enterprise-class lines of stackable and standalone switches, respectively. These switches provide high availability, scalability, security, energy efficiency, and ease of operation with innovative features such as Cisco StackPower (available only on the Catalyst 3750-X), IEEE 802.3at Power over Ethernet Plus (PoE+) configurations, optional network modules, redundant power supplies, and Media Access Control Security (MACsec) features. The Cisco Catalyst 3750-X Series with StackWise Plus technology provides scalability, ease of management and investment protection for the evolving business needs. The Cisco Catalyst 3750-X and 3560-X enhance productivity by enabling applications such as IP telephony, wireless, and video for borderless network experience. Cisco Catalyst 3750-X and 3560-X Series primary features: 24 and 48 10/100/1000 PoE+, non-poe models, and 12 and 24 GE SFP port models Four optional uplink network modules with GE or 10GE ports Industry first PoE+ with 30W power on all ports in 1 rack unit (RU) form factor Dual redundant, modular power supplies and fans Media Access Control Security (MACsec) hardware-based encryption Flexible NetFlow and switch-to-switch hardware encryption with the uplink Service Module Open Shortest Path First (OSPF) for routed access in IP Base image IPv4 and IPv6 routing, Multicast routing, advanced quality of service (QoS), and security features in hardware Enhanced limited lifetime warranty (LLW) with next business day (NBD) advance hardware replacement and 90 day access to Cisco Technical Assistance Center (TAC) support Enhanced Cisco EnergyWise for operational cost optimization by measuring actual power consumption of the PoE devices, reporting, and reducing energy consumption across the network USB Type-A and Type-B ports for storage and console respectively and an out-of-band Ethernet management port In addition to the above features, the Cisco Catalyst 3750-X switches also offer: Cisco StackPower technology: An innovative feature and industry first for sharing power among stack members Cisco StackWise Plus technology for ease of use and resiliency with 64 Gbps of throughput Investment protection with backward compatibility with all other models of Cisco Catalyst 3750 Series Switches Switch Configurations All switch models can be configured with four optional network modules. The PoE+ and non-poe switch models are available with either the LAN Base or IP Base feature set. IP Services feature set is available as an upgrade option at the time of ordering or through a license at a later time. The GE SFP switch models are available with either IP Base or IP Services feature set Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 1 of 34

2 Stackable Switches Figure 1 shows the Cisco Catalyst 3750-X Series Switches (front and back). Figure 1. Cisco Catalyst 3750-X Series Switches (Front and Back) Table 1 shows the Cisco Catalyst 3750-X Series configurations. Table 1. Cisco Catalyst 3750-X Series Configurations Feature Set Models Total 10/100/1000 Ethernet Ports Default AC Power Supply Available PoE Power StackPower LAN Base WS-C3750X-24T-L 24 WS-C3750X-48T-L W - Available with upgrade to IP Base WS-C3750X-24P-L 24 PoE+ 715W 435W WS-C3750X-48P-L 48 PoE+ WS-C3750X-48PF-L 48 PoE+ 1100W 800W IP Base WS-C3750X-24T-S W - Yes WS-C3750X-48T-S 48 WS-C3750X-24P-S 24 PoE+ 715W 435W WS-C3750X-48P-S 48 PoE+ WS-C3750X-48PF-S 48 PoE+ 1100W 800W WS-C3750X-12S-S 12 GE SFP 350W - WS-C3750X-24S-S 24 GE SFP 350W - IP Services WS-C3750X-12S-E 12 GE SFP 350W - WS-C3750X-24S-E 24 GE SFP 350W - Standalone Switches Figure 2 shows Cisco Catalyst 3560-X Series Switches. Figure 2. Cisco Catalyst 3560-X Series Switches 2011 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 2 of 34

3 Table 2 shows the Cisco Catalyst 3560-X Series configurations. Table 2. Cisco Catalyst 3560-X Series Configurations Feature Set Models Total 10/100/1000 Ethernet Ports Default AC Power Supply Available PoE Power LAN Base WS-C3560X-24T-L 24 WS-C3560X-48T-L W - WS-C3560X-24P-L 24 PoE+ 715W 435W WS-C3560X-48P-L 48 PoE+ WS-C3560X-48PF-L 48 PoE+ 1100W 800W IP Base WS-C3560X-24T-S 24 WS-C3560X-48T-S W - WS-C3560X-24P-S 24 PoE+ 715W 435W WS-C3560X-48P-S 48 PoE+ WS-C3560X-48PF-S 48 PoE+ 1100W 800W Cisco Catalyst 3750-X and 3560-X Series Software In addition to IP Base and IP Services feature sets, the Cisco Catalyst 3750-X and 3560-X Series come with a new LAN Base feature set. The three feature sets available with all Cisco Catalyst 3750-X and 3560-X Series Switches are: LAN Base: Enhanced Intelligent Services IP Base: Baseline Enterprise Services IP Services: Enterprise Services The LAN Base feature set offers enhanced intelligent services that includes comprehensive Layer 2 features, with up-to 255 VLANs. The IP Base feature set provides baseline enterprise services in addition to all LAN Base features, with 1K VLANs. IP Base also includes the support for routed access, StackPower (available only on the Catalyst 3750-X), MACsec, and the new Cisco Service Module. The IP Services feature set provides full enterprise services that includes advanced Layer 3 features such as Enhanced Interior Gateway Routing Protocol (EIGRP), Open Shortest Path First (OSPF), Border Gateway Protocol (BGP), Protocol Independent Multicast (PIM), and IPv6 routing such as OSPFv3 and EIGRPv6. All software feature sets support advanced security, QoS, and management features. The IP Services feature set is only available as an upgrade option at the time of ordering or through a license at a later time; there is no dedicated IP Services switch model. The Cisco Catalyst 3750-X Series Switches with LAN Base feature set can only stack with other Cisco Catalyst 3750-X Series LAN Base switches. A mixed stack of LAN Base switch with IP Base or IP Services features set is not supported. Customers can transparently upgrade the software feature set in the Cisco Catalyst 3750-X and 3560-X Series Switches through Cisco IOS Software activation. Software activation authorizes and enables the Cisco IOS Software feature sets. A special file contained in the switch, called a license file, is examined by Cisco IOS Software when the switch is powered on. Based on the license s type, Cisco IOS Software activates the appropriate feature set. License types can be changed, or upgraded, to activate a different feature set. For detailed information about Software Activation, visit Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 3 of 34

4 Cisco StackWise Plus Technology Cisco StackWise Plus technology is built on the highly successful industry leading StackWise technology, which is a premium stacking architecture optimized for GbE. StackWise technology was designed to respond to additions, deletions, and redeployment while maintaining constant performance. The stack behaves as a single switching unit that is managed by a master switch elected from one of the member switches. The master switch automatically creates and updates all the switching and optional routing tables. A working stack can accept new members or delete old ones without service interruption. StackWise creates a highly resilient single unified system of up to nine switches, providing simplified management using a single IP address, single telnet session, single command-line interface (CLI), auto-version checking, autoconfiguration, and more. StackWise Plus supports all the features of StackWise and provides backward compatibility with the existing Cisco Catalyst 3750 Series Switches while enhancing the throughput of the system up to 64 Gbps. StackWise Plus also enables local switching in Cisco Catalyst 3750-X Series Switches. Local switching packets coming into a port in the Cisco Catalyst 3750-X Series or 3750-E Series Switch destined for another port in the same switch do not have to traverse through the stack ring, thus increasing the forwarding capacity of the switch. The Cisco Catalyst 3750-X Series stacks up to nine switches as a single logical unit for a total of 432 Ethernet 10/100/1000 ports with 18 10GbE ports. Individual 10/100/1000 units can be joined in any combination to evolve with network needs. Cisco StackPower Technology The Cisco Catalyst 3750-X Series introduces Cisco StackPower technology, innovative power interconnect system that allows the power supplies in a stack to be shared as a common resource among all the switches. Cisco StackPower unifies the individual power supplies installed in the switches and creates a pool of power, directing that power where it is needed. This feature is only available in the Cisco Catalyst 3750-X Series Switches with IP Base or IP Services feature set. Up to four switches can be configured in a StackPower stack with the special connector at the back of the switch using the StackPower cable, which is different than the StackWise cables available on all Cisco Catalyst 3750 models. (See Figure 3.) Figure 3. StackPower Connector 2011 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 4 of 34

5 StackPower can be deployed in either power sharing mode or redundancy mode. In power sharing mode, the power of all the power supplies in the stack is aggregated and distributed among the switches in the stack. In redundant mode, when the total power budget of the stack is calculated, the wattage of the largest power supply is not included. That power is held in reserve and used to maintain power to switches and attached devices when one power supply fails, enabling the network to operate without interruption. Following the failure of one power supply, the StackPower mode becomes power sharing. StackPower allows customers to simply add one extra power supply in any switch of the stack and provide either power redundancy for any of the stack members or simply add more power to the shared pool. StackPower eliminates the need for an external redundant power system or installation of dual power supplies in all the stack members. Network Module Figure 4 shows network module with four GbE or two 10GbE SFP+ interfaces. Figure 4. Network Module with Four GbE, Two 10GbE SFP+ Interfaces, Two 10GB-T and Service Module with Two 10GbE SFP+ Interfaces The Cisco Catalyst 3750-X Series and 3560-X Series Switches support four optional network modules for uplink ports. The default switch configuration doesn t include the uplink module; at the time of switch purchase the customer has the flexibility to choose from the network modules described in Table 3. Table 3. Network Module Numbers and Descriptions Product Number C3KX-NM-1G C3KX-NM-10G C3KX-NM-10GT C3KX-SM-10G Product Description Four GbE port network module Two 10GbE SFP+ ports network module with four physical ports with two SFP+ and two regular SFP ports Two 10GB-T ports network module Service Module with two 10GbE SFP+ ports network module for Netflow and MACsec encryption 2011 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 5 of 34

6 The SFP+ interface supports both 10GbE and GbE port, allowing customers to use their investment in GbE SFP and upgrade to 10GbE when business demands change, without having to do a comprehensive upgrade of the access switch. The four uplink modules are hot swappable. The four network modules can be used in any of the combinations shown in Table 4. Table 4. 10GbE Network Module Configuration Interface Options Network Module 10GbE SFP+ Ports GbE SFP Ports 1GbE GbE Network Module GB-T 2 (RJ-45) 0 Service Module Service Module The new Cisco Service Module offers enhanced security and Netflow features on the uplink ports of the Cisco Catalyst 3750-X and 3560-X. The service module is supported with IP Base or IP Services feature set. It can be used with SFP or SFP+ at 1G or 10G speeds. The new Cisco Service Module has custom dedicated hardware for NetFlow monitoring, separate from the dedicated hardware for MACSec. Therefore there is no effect on packet forwarding performance and latency. It offers flexibility with the user being able to define flows. The new Cisco Service Module enables the following services: Line rate (40G) Flexible NetFlow for Network Monitoring and Security Anomaly Detection Supported version 9 32,000 simultaneous flows 128 simultaneous active monitors Line rate (40G) MACsec encryption NetFlow is a networking monitoring technology. A NetFlow table can be used to collect flow statistics. The flow information can be used by customers for a variety of use cases such as understanding: Applications running on the network and identifying undesired applications, P2P, and so on Granular local and aggregated campus view (top N applications, drill down, and so on) Top talkers (ports, users, applications) for application usage, productivity and asset utilization, and so on Security anomaly detection by examining flows that do not traverse trust boundaries for inside the perimeter attacks Effects of network and application changes Compliance conformation Traffic patterns for capacity planning 2011 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 6 of 34

7 Enabling NetFlow at the access switch makes sure you get all flows. To not miss out any flows the access switch is the most logical place in the network for collecting statistics and monitoring flows. Get MAC-address and access port information associated with the flow to get directly to the source of the flow. Most collectors are able to use the location based on MAC-address and interface port number provided by the access switch to the collector. Thus by enabling NetFlow at the access switch you are able to get the location information of the flow. Access switch has a variety of identity mechanisms for user authentication, and adding user awareness is the natural progression that can be developed. Access switches are an order of magnitude greater than distribution and core, which makes them scale well for NetFlow and make sure there are no performance effects of oversubscription at aggregation and core. 10GB-T Module The new Cisco 10G Base-T module is hot-swapable and can operate at either 10GE or GE speed (with manual configuration). Table 5 shows the cable types and supported lengths of the new Cisco 10G Base-T module. Table 5. 10GB-T Cable Types and Supported Lengths Cable Type Category 7a Category 7 Category 6 Category 6a ** Supported Length 100 meters 100 meters 55 meters 100 meters Category 5e * 55 meters * * Category 5e is not specified by IEEE802.3 for 10GBase-T. ** Category 6a requires 3db Insertion Loss margin at 250MHz. MACsec The Cisco Catalyst 3750-X and 3560-X Series Switches offer exceptional security with integrated hardware support for MACsec defined in IEEE 802.1AE. MACsec provides MAC layer encryption over wired networks using out-ofband methods for encryption keying. In Cisco Catalyst 3750-X and 3560-X Series Switches both the user/down-link ports (links between the switch and endpoint devices such as a PC or IP phone) and, using the service module, the network/uplink ports can be secured using MACsec. With the service module you can encrypt switch-to-switch links such as access to distribution, or encrypt dark fiber links within a building or between buildings. Dual Redundant Modular Power Supplies The Cisco Catalyst 3750-X Series and 3560-X Series Switches support dual redundant power supplies. The switch ships with one power supply by default, and the second power supply can be purchased at the time of ordering the switch or at a later time. If only one power supply is installed, it should always be in the power supply bay 1. (See Figure 5.) 2011 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 7 of 34

8 Figure 5. Dual Redundant Power Supplies Table 6 shows the different power supplies available in these switches and available PoE power. Table 6. Power Supply Models Models Default Power Supply Available PoE Power 24 Port Data Switch C3KX-PWR-350WAC - 48 Port Data Switch 24 Port PoE Switch 48 Port PoE Switch C3KX-PWR-715WAC 435W 48 Port Full PoE Switch C3KX-PWR-1100WAC 800W In addition to the above power supplies a 440W DC power supply is available as a configurable option on all switch models. The DC power supply also delivers 175W of PoE for maximum flexibility, and customers can mix and match the AC and DC power supplies in the two available power supply slots. Any of these power supplies can be installed in any of the switches. Power over Ethernet Plus (PoE+) In addition to PoE 802.3af, the Cisco Catalyst 3750-X and 3560-X Series Switches support PoE+ (IEEE 802.3at standard), which provides up to 30W of power per port. The Cisco Catalyst 3750-X and 3560-X Series Switches can provide a lower total cost of ownership for deployments that incorporate Cisco IP phones, Cisco Aironet wireless LAN (WLAN) access points, or any IEEE 802.3af-compliant end device. PoE removes the need for wall power to each PoE-enabled device and eliminates the cost for additional electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN deployments. Table 7 shows the power supply combinations required for different PoE needs. Table 7. Power Supply Requirements for PoE and PoE+ 24 Port PoE Switch 48 Port PoE Switch PoE (15.4W per port) One C3KX-PWR-715WAC One C3KX-PWR-1100WAC or Two C3KX-PWR-715WAC PoE+ (30W per port) One C3KX-PWR-1100WAC or Two C3KX-PWR-715WAC Two C3KX-PWR-1100WAC or One C3KX-PWR-1100WAC and One C3KX- PWR-715WAC 2011 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 8 of 34

9 expandable Power System (XPS) 2200 The XPS 2200 is the next-generation redundant power system (RPS). It not only provides the functionalities offered by the RPS but also provides enhanced services with the support for Cisco StackPower technology. When used with the Cisco Catalyst 3560-X, it provides RPS functionality, but when used with the Cisco Catalyst 3750-X, it provides StackPower functionality to all the stack members, including power supply redundancy. The XPS supports dual redundant power supplies and fans. Up to nine switches can be connected to the XPS 2200, and it can provide power backup to two of the failed switches concurrently (when appropriately sized power supplies are used). The power supplies used by the XPS 2200 are the same as the ones supported in the Cisco Catalyst 3750-X and 3560-X Series Switches. The XPS 2200 is fully configurable for setting switch priorities in case of multiple failures. Please refer to the XPS 2200 Performance Specifications section at the end of this document. Figure 6. The XPS 2200 Cisco Catalyst 3750-X and 3560-X Series Switches Enable Cisco Borderless Network Experience Borderless Networks, a Cisco architecture, deliver the new workspace experience, connecting anyone, anywhere, using any device, to any resource securely, reliably, and transparently. Cisco s Borderless Networks architecture addresses primary IT and business challenges to help create a truly borderless experience by bringing interactions closer to the employee and customer. Borderless experience is only possible with intelligent network elements designed and architected to meet the needs of a global workspace. Cisco Network Access is a primary component of this architecture, enabling various borderless network services such as mobility, security, MediaNet, EnergyWise, and ease of operations for increased productivity and operational efficiency. When network access is intelligent, it knows the identity of the user, as well as where the user is on the network. It knows what is connecting to the network, to automatically provision the network for QoS and delivery. It becomes services-aware to optimize user experience. Only with intelligent access network, your enterprise can go borderless securely and transparently. Your business can save energy, simplify operations with better business efficiency, and have an optimized total cost of ownership. Cisco Network Access for Borderless solution focuses on the following primary areas: Sustainability Ease of operations Borderless security Borderless experience 2011 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 9 of 34

10 Sustainability Cisco Catalyst switching solutions enable greener practices through measurable power efficiency, integrated services, and continuous innovations such as Cisco EnergyWise, an enterprisewide solution that monitors and conserves energy with customized policies. Together, Cisco EnergyWise technology and Cisco Catalyst switches reduce greenhouse gas (GhG) emissions and increase energy cost savings and sustainable business behavior. Sustainability features in the Cisco Catalyst 3750-X and 3560-X Series Switches include the following features sets: Cisco EnergyWise technology Efficient switch operation Intelligent power management Cisco EnergyWise Technology Cisco EnergyWise is an innovative architecture, added to fixed configuration switches, promoting companywide sustainability by reducing energy consumption across an entire corporate infrastructure and affecting more than 50 percent of global greenhouse gas emissions created by worldwide building infrastructure, a much greater effect than the 2 percent generated by the IT industry. Cisco EnergyWise enables companies to measure the power consumption of network infrastructure and network-attached devices and manage power consumption with specific policies, reducing power consumption to realize increased cost savings, potentially affecting any powered device. EnergyWise encompasses a highly intelligent network-based approach to communicate messages that measure and control energy between network devices and endpoints. The network discovers Cisco EnergyWise manageable devices, monitors their power consumption, and takes action based on business rules to reduce power consumption. EnergyWise uses a unique domain-naming system to query and summarize information from large sets of devices, making it simpler than traditional network management capabilities. Cisco EnergyWise s management interfaces allow facilities and network management applications to communicate with endpoints and each other using the network as a unifying fabric. The management interface uses standard SNMP or TCP to integrate Cisco and thirdparty management systems. Efficient Switch Operation Cisco Catalyst 3750-X and 3560-X Series Switches, designed and engineered by Cisco, provide optimum power saving, low power operations for industry best-in-class power management, and power consumption capabilities. The Cisco Catalyst 3750-X and 3560-X ports are capable of reduced power modes so that ports not in use can move into a lower power utilization state. StackPower lets customers to simply add one extra power supply in any switch of the stack and provide either power redundancy for any of the stack members or simply add more power to the shared pool. Intelligent Power over Ethernet Management The Cisco Catalyst 3750-X and 3560-X Series PoE models support Cisco IP phones and Cisco Aironet WLAN access points providing up to 30W of power per port, as well as any IEEE 802.3af-compliant end device. Cisco Discovery Protocol Version 2 allows the Cisco Catalyst 3750-X and 3560-X Series Switches to negotiate a more granular power setting when connecting to a Cisco powered device such as IP phones or access points than what is provided by IEEE classification. Per port power consumption command allows customers to specify maximum power setting on an individual port Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 10 of 34

11 Per port PoE power sensing measures actual power being drawn, enabling more intelligent control of powered devices. The PoE MIB provides proactive visibility into power usage and allows customers to set different power-level thresholds. Ease of Operations The Cisco Catalyst 3750-X and 3560-X help reduce the operating costs through: Cisco Catalyst Smart Operations Easy to use deployment and control features Advanced, intelligent network management tools Cisco Catalyst Smart Operations Cisco Catalyst Smart Operations is a comprehensive set of capabilities that simplify LAN deployment, configuration, and troubleshooting. In addition to adaptive, always on technologies such as StackWise and StackPower, Cisco Catalyst Smart Operations enable zero touch installation and replacement of switches, fast upgrade, as well as ease of troubleshooting with reduced operational cost. Cisco Catalyst Smart Operations is a set of features that includes Smart Install, auto Smartports, Smart Configuration. and Smart Troubleshooting to enhance operational excellence: Cisco Smart Install is a transparent plug and play technology to configure the Cisco IOS Software image and switch configuration without user intervention. Smart Install utilizes dynamic IP address allocation and the assistance of other switches to facilitate installation providing transparent network plug and play. Cisco Auto Smartports provide automatic configuration as devices connect to the switch port, allowing auto detection and plug and play of the device onto the network. Cisco Smart Configuration provides a single point of management for a group of switches and in addition adds the ability to archive and backup configuration files to a file server or switch allowing seamless zero touch switch replacement. Cisco Smart Troubleshooting is an extensive array of debug diagnostic commands and system health checks within the switch, including Generic Online Diagnostics (GOLD) and Onboard Failure Logging (OBFL). Easy to Use Deployment and Control Features Embedded Event Manager (EEM) is a powerful and flexible feature that provides real-time network event detection and onboard automation. Using EEM, customers can adapt the behavior of their network devices to align with their business needs. This feature requires IP Base feature set. IP service-level agreements (SLAs) enable customers to assure new business-critical IP applications, as well as IP services that utilize data, voice, and video, in an IP network. This feature requires IP Services feature set. Dynamic Host Configuration Protocol (DHCP) autoconfiguration of multiple switches through a boot server eases switch deployment. Automatic QoS (AutoQoS) simplifies QoS configuration in voice over IP (VoIP) networks by issuing interface and global switch commands to detect Cisco IP phones, classify traffic, and help enable egress queue configuration. Stacking master configuration management and Cisco StackWise technology helps ensure that all switches are automatically upgraded when the master switch receives a new software version. Automatic software version checking and updating help ensure that all stack members have the same software version. Autonegotiation on all ports automatically selects half- or full-duplex transmission mode to optimize bandwidth Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 11 of 34

12 Dynamic Trunking Protocol (DTP) facilitates dynamic trunk configuration across all switch ports. Port Aggregation Protocol (PAgP) automates the creation of Cisco Fast EtherChannel groups or Gigabit EtherChannel groups to link to another switch, router, or server. Link Aggregation Control Protocol (LACP) allows the creation of Ethernet channeling with devices that conform to IEEE 802.3ad. This feature is similar to Cisco EtherChannel technology and PAgP. Automatic media-dependent interface crossover (MDIX) automatically adjusts transmit and receive pairs if an incorrect cable type (crossover or straight-through) is installed. Unidirectional Link Detection Protocol (UDLD) and Aggressive UDLD allow unidirectional links caused by incorrect fiber-optic wiring or port faults to be detected and disabled on fiber-optic interfaces. Switching Database Manager (SDM) templates for access, routing, and VLAN deployment allow the administrator to easily maximize memory allocation to the desired features based on deployment-specific requirements. Local Proxy Address Resolution Protocol (ARP) works in conjunction with Private VLAN Edge to minimize broadcasts and maximize available bandwidth. VLAN1 minimization allows VLAN1 to be disabled on any individual VLAN trunk. Smart Multicast, with Cisco StackWise Plus technology, allows the Cisco Catalyst 3750-X Series to offer greater efficiency and support for more multicast data streams such as video by putting each data packet onto the backplane only once. Internet Group Management Protocol (IGMP) Snooping for IPv4 and IPv6 MLD v1 and v2 Snooping provide fast client joins and leaves of multicast streams and limit bandwidth-intensive video traffic to only the requestors. Multicast VLAN Registration (MVR) continuously sends multicast streams in a multicast VLAN while isolating the streams from subscriber VLANs for bandwidth and security reasons. Per-port broadcast, multicast, and unicast storm control prevents faulty end stations from degrading overall systems performance. Voice VLAN simplifies telephony installations by keeping voice traffic on a separate VLAN for easier administration and troubleshooting. Cisco VLAN Trunking Protocol (VTP) supports dynamic VLANs and dynamic trunk configuration across all switches. Remote Switch Port Analyzer (RSPAN) allows administrators to remotely monitor ports in a Layer 2 switch network from any other switch in the same network. For enhanced traffic management, monitoring, and analysis, the Embedded Remote Monitoring (RMON) software agent supports four RMON groups (history, statistics, alarms, and events). Layer 2 traceroute eases troubleshooting by identifying the physical path that a packet takes from source to destination. Trivial File Transfer Protocol (TFTP) reduces the cost of administering software upgrades by downloading from a centralized location. Network Timing Protocol (NTP) provides an accurate and consistent timestamp to all intranet switches. Advanced, Intelligent Network Management Tools The Cisco Catalyst 3750-X and 3560-X Series Switches offer both a superior CLI for detailed configuration and Cisco Network Assistant software, a PC-based tool for quick configuration based on preset templates. In addition, CiscoWorks LAN Management Solution (LMS) supports the Cisco Catalyst 3750-X and 3560-X Series Switches for networkwide management Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 12 of 34

13 Cisco Network Assistant A PC-based network management application designed for small and medium-sized business (SMB) networks with up to 250 users, Cisco Network Assistant offers centralized network management and configuration capabilities. Cisco Network Assistant uses Cisco Smartports technology to simplify both initial deployment and ongoing maintenance. This application also features an intuitive GUI where users can easily apply common services across Cisco switches, routers, and access points, such as: Configuration management Troubleshooting advice Inventory reports Event notification Network security settings Password synchronization Drag-and-drop Cisco IOS Software upgrades Secure wireless For detailed information about Cisco Network Assistant, visit CiscoWorks LAN Management Solution CiscoWorks LAN Management Solution (LMS) is a comprehensive network lifecycle management solution. It provides an extensive library of easy-to-use features to automate the initial and day-to-day management of your Cisco network infrastructure. CiscoWorks LMS uniquely uses Cisco hardware and software platform knowledge and operational experience into a powerful set of work-flow driven configuration, monitoring, troubleshooting, reporting, and administrative tools. Including: Support for new Cisco hardware platforms the day they ship Support for new technologies and services from initial deployment to day-to-day administration and management, such as EnergyWise, Identity, Cisco Auto Smartports, Cisco Smart Install, and much more Configuration management tools built from Cisco experience and Cisco Validated Design recommendations Monitoring and troubleshooting capabilities that incorporates Cisco hardware best practices and diagnostics features Automation in managing hardware inventories, security vulnerabilities (PSIRTS) and platform end-of-life and support cycles For detailed information about CiscoWorks LMS, go to Borderless Security The Cisco Catalyst 3750-X and 3560-X Series Switches provide superior Layer 2 threat defense capabilities for mitigating man-in-the-middle attacks (such as MAC, IP, and ARP spoofing). TrustSec, a primary element of Borderless Security Architecture, helps enterprise customers secure their networks, data and resources with policybased access control, identity and role-aware networking, pervasive integrity, and confidentiality. The borderless security is enabled by the following feature sets in the Cisco Catalyst 3750-X and 3560-X Series Switches: Threat defense Cisco TrustSec Other advanced security features 2011 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 13 of 34

14 Threat Defense Cisco Integrated Security Features is an industry-leading solution available on Cisco Catalyst Switches that proactively protects your critical network infrastructure. Delivering powerful, easy-to-use tools to effectively prevent the most common and potentially damaging Layer 2 security threats, Cisco Integrated Security Features provides robust security throughout the network. Cisco Integrated Security Features include Port Security, DHCP Snooping, Dynamic ARP Inspection, and IP Source guard. Port Security secures the access to an access or trunk port based on MAC address. It limits the number of learned MAC addresses to deny MAC address-flooding. DHCP Snooping prevents malicious users from spoofing a DHCP server and sending out bogus addresses. This feature is used by other primary security features to prevent a number of other attacks such as ARP poisoning. Dynamic ARP Inspection (DAI) helps ensure user integrity by preventing malicious users from exploiting the insecure nature of the ARP protocol. IP source guard prevents a malicious user from spoofing or taking over another user s IP address by creating a binding table between the client s IP and MAC address, port, and VLAN. Cisco TrustSec TrustSec secures access to the network, enforces security policies, and delivers standard based security solutions such as 802.1X enabling secure collaboration and policy compliance. TrustSec capabilities reflect Cisco thought leadership, innovations, and commitment to customer success. These new capabilities include: IEEE 802.1AE MACsec with prestandard 802.1X-REV Key management: industry s first fixed switches with prestandard 802.1X-Rev key management. Available on Cisco Catalyst 3750-X and 3560-X Series Switches, MACsec provides Layer 2, line rate Ethernet data confidentiality and integrity on host facing ports, protecting against man-in-the-middle attacks (snooping, tampering, and replay). Flexible authentication that supports multiple authentication mechanisms including 802.1X, MAC Authentication Bypass and web authentication using a single, consistent configuration. Open mode that creates a user friendly environment for 802.1X operations. Integration of device profiling technology and guest access handling with Cisco switching to significantly improve security while reducing deployment and operational challenges. RADIUS Change of Authorization and downloadable Calls for Comprehensive policy management capabilities X Supplicant with Network Edge Access Transport (NEAT) enables extended secure access where compact switches in the conference rooms have the same level of security as switches inside the locked wiring closet. Other Advanced Security Features Other Advanced Security features include but are not limited to: Private VLANs restrict traffic between hosts in a common segment by segregating traffic at Layer 2, turning a broadcast segment into a nonbroadcast multiaccesslike segment. Private VLAN Edge provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users traffic. Unicast Reverse Path Forwarding (RPF) feature helps mitigate problems caused by the introduction of malformed or forged (spoofed) IP source addresses into a network by discarding IP packets that lack a verifiable IP source address Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 14 of 34

15 Multidomain Authentication allows an IP phone and a PC to authenticate on the same switch port while placing them on appropriate voice and data VLAN. Cisco security VLAN ACLs on all VLANs prevent unauthorized data flows from being bridged within VLANs. Cisco standard and extended IP security router ACLs define security policies on routed interfaces for control-plane and data-plane traffic. IPv6 ACLs can be applied to filter IPv6 traffic. Port-based ACLs for Layer 2 interfaces allow security policies to be applied on individual switch ports. Secure Shell (SSH) Protocol, Kerberos, and Simple Network Management Protocol Version 3 (SNMPv3) provide network security by encrypting administrator traffic during Telnet and SNMP sessions. SSH Protocol, Kerberos, and the cryptographic version of SNMPv3 require a special cryptographic software image because of U.S. export restrictions. Bidirectional data support on the Switched Port Analyzer (SPAN) port allows Cisco Intrusion Detection System (IDS) to take action when an intruder is detected. TACACS+ and RADIUS authentication facilitates centralized control of the switch and restricts unauthorized users from altering the configuration. MAC Address Notification allows administrators to be notified of users added to or removed from the network. Multilevel security on console access prevents unauthorized users from altering the switch configuration. Bridge protocol data unit (BPDU) Guard shuts down Spanning Tree PortFast-enabled interfaces when BPDUs are received to avoid accidental topology loops. Spanning Tree Root Guard (STRG) prevents edge devices not in the network administrator s control from becoming Spanning Tree Protocol root nodes. IGMP filtering provides multicast authentication by filtering out nonsubscribers and limits the number of concurrent multicast streams available per port. Dynamic VLAN assignment is supported through implementation of VLAN Membership Policy Server client capability to provide flexibility in assigning ports to VLANs. Dynamic VLAN facilitates the fast assignment of IP addresses. Borderless Experience Borderless network enables enterprise mobility and business-grade video services. Industry s first unified network (wired and wireless) location services enable tracking of mobile assets and the users of those assets for both wired and wireless devices. The true borderless experience is enabled by the following feature sets in the Cisco Catalyst 3750-X and 3560-X Series Switches: High availability High-performance IP routing Superior QoS Location awareness and mobility High Availability The Cisco Catalyst 3750-X Series increases availability for stackable switches. Each switch can operate both as master controller and as forwarding processor. Each switch in the stack can serve as a master, creating a 1:N availability scheme for network control. In the unlikely event of a single unit failure, all other units continue to forward traffic and maintain operation Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 15 of 34

16 Other high-availability features include but are not limited to: Cross-Stack EtherChannel provides the ability to configure Cisco EtherChannel technology across different members of the stack for high resiliency. Flexlink provides link redundancy with convergence time less than 100 ms. IEEE 802.1s/w Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP) provide rapid spanning-tree convergence independent of spanning-tree timers and also offers the benefit of Layer 2 load balancing and distributed processing. Stacked units behave as a single spanning-tree node. Per-VLAN Rapid Spanning Tree (PVRST+) allows rapid spanning-tree reconvergence on a per-vlan spanning-tree basis, without requiring the implementation of spanning-tree instances. Cisco Hot Standby Router Protocol (HSRP) is supported to create redundant, failsafe routing topologies. Switch-port autorecovery (Errdisable) automatically attempts to reactivate a link that is disabled because of a network error. High-Performance IP Routing Cisco Express Forwarding hardware routing architecture delivers extremely high-performance IP routing in the Cisco Catalyst 3750-X and 3560-X Series Switches. IP unicast routing protocols (Static, Routing Information Protocol Version 1 [RIPv1], and RIPv2, RIPng, EIGRP stub) are supported for small-network routing applications with IP Base feature set. Advanced IP unicast routing protocols (OSPF, EIGRP, BGPv4, and IS-ISv4) are supported for load balancing and constructing scalable LANs. IPv6 routing (OSPFv3, EIGRPv6) is supported in hardware for maximum performance. OSPF for routed access is included in the IP Base image. The IP Services feature set is required for full OSPF, EIGRP, BGPv4, and IS-ISv4. Equal-cost routing facilitates Layer 3 load balancing and redundancy across the stack. Policy-based routing (PBR) allows superior control by facilitating flow redirection regardless of the routing protocol configured. The IP Services feature set is required. Hot Standby Routing Protocol (HSRP) provides dynamic load balancing and failover for routed links, up to 32 HSRP links supported per unit or stack. Protocol Independent Multicast (PIM) for IP multicast routing is supported, including PIM sparse mode (PIM- SM), PIM dense mode (PIM-DM), PIM sparse-dense mode and Source Specific Multicast (SSM). The IP Services feature set is required. Virtual routing and forwarding (VRF)-Lite enables a service provider to support two or more VPNs, with overlapping IP addresses. IP Services feature set is required. Superior Quality of Service The Cisco Catalyst 3750-X and 3560-X Series offers GbE speed with intelligent services that keep everything flowing smoothly, even at 10 times the normal network speed. Industry-leading mechanisms for marking, classification, and scheduling deliver superior performance for data, voice, and video traffic, all at wire speed. Following are some of the QoS features supported in the Cisco Catalyst 3750-X and 3560-X Series Switches: Cross-stack QoS allows QoS to be configured across the entire stack (available only on the Catalyst 3750-X) p class of service (CoS) and differentiated services code point (DSCP) field classification are provided, using marking and reclassification on a per-packet basis by source and destination IP address, MAC address, or Layer 4 TCP/UDP port number. Cisco control-plane and data-plane QoS ACLs on all ports help ensure proper marking on a per-packet basis Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 16 of 34

17 Eight egress queues per port help enable differentiated management of different traffic types across the stack. Four queues are user configurable and four are reserved for system use. Shaped Round Robin (SRR) scheduling helps ensure differential prioritization of packet flows by intelligently servicing the ingress queues and egress queues. Weighted Tail Drop (WTD) provides congestion avoidance at the ingress and egress queues before a disruption occurs. Strict priority queuing helps ensure that the highest-priority packets are serviced ahead of all other traffic. The Cisco committed information rate (CIR) function provides bandwidth in increments as low as 8 Kbps. Rate limiting is provided based on source and destination IP address, source and destination MAC address, Layer 4 TCP/UDP information, or any combination of these fields, using QoS ACLs (IP ACLs or MAC ACLs), class maps, and policy maps. Up to 64 aggregate or individual policers are available per Fast Ethernet or GbE port. Location Awareness and Mobility In order to provide delivery of a best-in-class network experience to end users, it s critical for network access to be location aware. A wide variety of devices can appear on the network, both wired (switches, routers, IP phones, PCs, access points, controllers, video digital media players, and so on) and wireless (mobile devices, wireless tags, rogues, and so on). In many industries, locating assets is primarily a manual process and is time consuming and error prone. The inability to locate assets in real time and to help ensure their availability when and where they are needed limits reaction time and efficiency. Location services answer business-critical questions about both mobile assets and the users of those assets regardless of whether those assets are connecting using wired or wireless, and hence directly improve their organization's profitability. Network Location Services also improve security and accelerate client troubleshooting by locating an asset, user, or device on the network. Network visibility and control provide centralized visibility into wired and wireless devices on the network and their location. Location-assisted client troubleshooting enables tracking of wired or wireless clients for quick problem resolution. Asset tracking and improved security provide centralized inventory of wired and wireless devices and asset management for improved business processes. Cisco Mobility Service Engine (MSE) Open API provides an open API (based on Simple Object Access Protocol [SOAP] and XML protocol) for any business application that needs the location data. Location based policy allows greater control and visibility. With EnergyWise, power policies can be set up (to reduce the power or shut down the power from a port) based on the location. Cisco Emergency Responder (CER) enhances emergency calling from Cisco Unified CallManager. It helps assure that Cisco Unified CallManager sends emergency calls to the appropriate Public Safety Answering Point (PSAP) for the caller's location Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 17 of 34

18 Cisco Catalyst 3750-X and 3560-X Series Specifications Switch Performance Table 8 shows Cisco Catalyst 3750-X and 3560-X Series Switches performance specifications. Table 8. Cisco Catalyst 3750-X and 3560-X Performance Specifications Performance Numbers for All Switch Models Switching Fabric DRAM Flash 160 Gbps 256 MB 64 MB (512MB for 3750X-12S and 3750X-24S) Total VLANs 1005 VLAN IDs Total Switched Virtual Interfaces (SVIs) Jumbo Frame 4K 1K 9216 Byte Total Routed Ports per 3750-X Stack 468 Forwarding Rate of the Switch Models (with Two 10GbE Uplinks) Forwarding Rate 3750X-24T 65.5 mpps 3750X-24P 3750X-48T mpps 3750X-48P 3750X-48PF 3750X-12S 3750X-24S 3560X-24T 35.7 mpps 65.5 mpps 65.5 mpps 3560X-24P 3560X-48T mpps 3560X-48P 3560X-48PF Scalability Numbers MAC, routing, security, and QoS scalability numbers depend on the type template used in the switch. Routing template is not supported in the LAN Base feature set. Table 9 shows Cisco Catalyst 3750-X and 3560-X Series Switch scalability numbers. Table 9. Cisco Catalyst 3750-X and 3560-X Series Switch Scalability Numbers Access Default Routing VLAN Unicast MAC addresses 4K 6K 3K 12K IGMP groups and multicast routes 1K 1K 1K 1K Unicast routes 6K 8K 11K 0 Directly connected hosts 4K 6K 3K 0 Indirect routes 2K 2K 8K 0 Policy-based routing ACEs 0.5K 0 0.5K 0 QoS classification ACEs 0.5K 0.5K 0.5K 0.5K Security ACEs 2K 1K 1K 1K VLANs 1K 1K 1K 1K 2011 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 18 of 34

19 Dimensions, Weight, Acoustic, MTBF, and Environmental Range Specifications for Cisco Catalyst 3750-X and 3560-X Series Switches Table 10 shows dimensions, weight, acoustic, MTBF, and environmental range. Table 10. Dimensions, Weight, Acoustic, MTBF, and Environmental Range Dimensions (H x W x D) Inches Centimeters 3750X-24T 1.75 x 17.5 x x 44.5 x X-24P 3750X-48T 3750X-48P 3750X-48PF 1.75 x 17.5 x x 44.5 x X-12S 1.75 x 17.5 x x 44.5 x X-24S 1.75 x 17.5 x x 44.5 x X-24T 1.75 x 17.5 x x 44.5 x X-24P 3560X-48T 3560X-48P 3560X-48PF 1.75 x 17.5 x x 44.5 x 49.5 Weight Pounds Kilograms 3750X-24T X-24P X-48T X-48P X-48PF X-12S X-24S X-24T X-24P X-48T X-48P X-48PF Mean Time Between Failure (MTBF) Hours 3750X-24T 189, X-24P 167, X-48T 171, X-48P 139, X-48PF 139, X-12S 194, X-24S 163, X-24T 208, X-24P 181, X-48T 186, X-48P 149, X-48PF 149,594 C3KX-PWR-350WAC 580,710 C3KX-PWR-715WAC 664, Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 19 of 34

20 C3KX-PWR-1100WAC 392,174 C3KX-PWR-440WDC 469,350 C3KX-NM-1G 5,083,574 C3KX-NM-10G 2,468,553 C3KX-NM-10GT 1,411,719 C3KX-SM-10G 396,940 Environmental Ranges With AC Power Supply Operating Environment and Altitude Normal Operating Temperature and Altitudes: -5ºC to +45ºC, up to 5,000 feet (1500 m) -5ºC to +40ºC, up to 10,000 feet (3000 m) Short-Term * Exceptional Conditions: -5ºC to +50ºC, up to 5,000 feet (1500 m) -5ºC to +45ºC, up to 10,000 feet (3000 m) -5ºC to +45ºC, at sea level with single fan failure * Not more than following in one year period: 96 consecutive hours, or 360 hours total, or 15 occurrences With DC Power Supply Operating Environment and Altitude (NEBS) Normal Operating Temperature and Altitudes: -5ºC to +45ºC, up to 6,000 feet (1800 m) -5ºC to +40ºC, up to 10,000 feet (3000 m) -5ºC to +35ºC, up to 13,000 feet (4000 m) Short-Term * Exceptional Conditions: -5ºC to +55ºC, up to 6,000 feet (1800 m) -5ºC to +50ºC, up to 10,000 feet (3000 m) -5ºC to +45ºC, up to 10,000 feet (4000 m) -5ºC to +45ºC, at sea level with single fan failure * Not more than following in one year period: 96 consecutive hours, or 360 hours total, or 15 occurrences Acoustic Noise Measured per ISO 7779 & Declared per ISO 9296 Bystander positions operating to an ambient temperature of 25 C With AC Power Supply (with 16PoE+ ports loaded): LpA: 43 dba Typical, 46 dba Maximum LwA: 5.2 Bel Typical, 5.5 Bel Maximum For GE SFP port models: LpA: 30 dba Typical, 33 dba Maximum LwA: 3.9 Bel Typical, 4.2 Bel Maximum Typical: Noise emission for a typical configuration Maximum: Statistical maximum to account for variation in production Relative Humidity Storage Environment: Vibration 5% to 95%, noncondensing Temperature: -40 C' to 70 C' Altitude: 15,000 ft Operating: 0.41Grms from 3 to 500Hz with spectral break points of G2/Hz at 10Hz and 200Hz 5dB/octave roll off at each end. Nonoperating: 1.12Grms from 3 to 500Hz with spectral break points of G2/Hz at 10Hz and 100Hz 5dB/octave roll off at each end. Shock Operating: 30G, 2ms Half sine Nonoperating: 55G, 10ms Trapezoid Note: GLC-GE-100FX and GLC-T SFPs are not supported for NEBS short-term operation Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 20 of 34